Identification scripts
This page is in progress Please check back later for additional changes |
Identification scripts are scripts that add user identification to written canvas text without using text or cell colours. They primarily achieve this by adding a note or JavaScript link to their text that contains the author's username and commonly the time it was written on as well.
They became popular during the 2025 color ban, as colour was the primary means of identifying someone on the canvas.
How they work
Identification scripts attach note or JavaScript links to every character written by the user, although note links are commonly used. They contain information that helps identify the author. They always contain the author's username and also commonly have the time it was written on as well. While the time format can vary, Unix timestamps are fairly common. Here is an example using the general format of most identification scripts:
Written by Bob <1767507202>
The write time is included to make impersonation harder, as it makes the identification text constantly changing and dynamic. This is because if someone were to simply attach a static note to their text (e.g. "by Alice"), someone could type fabricated message and then easily apply the same note text to their own writing.
As identification scripts are usually not shared, this makes impersonation nearly impossible unless the attacker has the necessary scripting skills.
Hashes
While less common, a randomly generated hash may be used in place of the character's write time. The hashes can be proprietary to the identification script, allowing for validation of the hash.
Notable scripts
OWOT Candy Cane
OWOT Candy Cane is an identification script by Dupy. It alternates his text between URL and coordinate links every 2 characters and adds a JavaScript link that provides his name, the write time and date, and the current version.
-
First version
-
Later revision with the write date
-
OWOT Candy Cane v0.11.1-2
Katiserie's script
Katiserie was the second known user to create an identification script on December 20th, 2025. It attaches note links to all her messages which say "written by katiserie" when hovered over.
-
Katiserie using note links to tag her messages (December 20th, 2025)
-
A user named nmm commenting on Katiserie's script (December 21st, 2025)
67x8's script

Created by 67x8 around December 24th, 2025. This was the first known instance of an identification script making use of hashes.
Dossenal 1H: a8693e0db38b857afffc1f02cecad71cec2d01282c4a8edc51a49a81856e89e6 Ignore the headings above, what you're seeing here is neither JavaScript code or untrusted; it's a link that this character is typed (or pasted) by ijo Okalé. (67x8) The above sequence of seemingly random numbers is used as a checksum to verify my authenticity. The script used to generate the above number is not disclosed and never will be, preventing all methods of impersonation.
HashBrown
HashBrown is an open source identification script created by gimmickCellar that generates hashes based on the X, Y, character typed, text decoration, as well as some other factors including its own source code. It creates a 13 digit Base 24 hash (older versions had varying lengths), then note-links the text typed. It was later forked by ??? to make it use JavaScript links instead.

The custom message used by Ա/12345: javascript:Hash:[5345189324748780118307653469275214] (OWOT HashBrown v1.2) [EN] This text you are seeing above is a Hash used to avoid impersonation. Users (usually anons) have used the note or javascript features to try to impersonate someone. The decimal hash means that this text was written by 12345. All impersonation attempts will not be tolerated. This script will not and will never be shared with anyone. [ES] Este texto que ves arriba es un Hash usado para evitar la suplantación de identidad. Los usuarios (normalmente anons) han usado las funciones de nota o de javascript para intentar suplantar a alguien. El hash decimal significa que este texto fue escrito por 12345. No se tolerará ningún intento de suplantación de identidad. Este script no se compartirá con nadie, ni ahora ni nunca.